Check out my last blog post talking about how I customize my malware analysis machine with tools and plugins that can make my life easier and save me time. blog.cyber5w.com/malware a…

Just a quick tip for reverse engineering new guys, and any old one who doesn't care. Never rely on Decompiled code only, that always happens to me, but this time that was insane. my decompiler missed tens of lines of functions and API calls.

Hey malware analysts, "Pikabot" is a relatively new malware and is considered the second wave of the famous "Qakbot". This malware contains two stages armed with many Anti-Analysis techniques to make defenders' lives harder like: blog.cyber5w.com/malware a…

- Junk Code - API Hashing - Encrypted Stack Strings - INT 0x2D instruction - OutputDebugString - Memory Write Watch Here is a detailed analysis of the new version of its Loader part.

ESXIArgs Ransomware analysis. ESXIArgs Ransomware is widely spread these days due to the wide exploitation of a vulnerability with CVE-2021-21974 which is quite old but is not patched in many ESXI Servers. The malware itself is not complex at all but the danger comes from the

Stop ransomware family is one of the most spread ransomware families, it comes packaged in game cracks, email attachments, and many other ways. it's using an asymmetric key algorithm for encryption so it's impossible to decrypt without paying the Ransome and getting the

decryption key. "Or the luck be with you and the hackers gets hacked" here is my detailed analysis of the Stop ransomware which contains: - General information about the sample. - How the sample checks & initializes the environment.